$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/5522f690-be56-375d-afff-2d69c2f991dd.roa File: 5522f690-be56-375d-afff-2d69c2f991dd.roa (raw, json) Hash identifier: AmItwdZhbvFr0gQths/M+mTN7Wp3cP36Ve029sDgtT8= Subject key identifier: B4:1A:46:55:7B:E8:4D:48:ED:19:5F:D3:AA:32:2E:22:9A:C0:6C:21 Certificate issuer: /CN=e1ec92c2-2a27-47bb-a115-e1db2cee0fef Certificate serial: 010D0C9F4328584D60E516DFD81C83925D658000 Authority key identifier: 16:5A:7A:F1:03:49:83:EA:4A:D5:9E:7D:02:EE:F7:1D:27:D4:0C:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/5522f690-be56-375d-afff-2d69c2f991dd.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 32772 IP address blocks: 64.255.52.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:16:df:d8:1c:83:92:5d:65:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ec92c2-2a27-47bb-a115-e1db2cee0fef Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=6e586e2c-ca31-4845-9264-60b953a24a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:dc:d0:8a:b3:e2:fb:9e:a0:32:f9:40:f6:10: f6:99:a0:88:b1:db:ff:65:04:4b:71:01:8a:ad:a9: b1:46:1d:09:b7:b4:01:c6:d8:e9:d8:24:08:8e:15: 49:5e:d4:ce:d1:49:fe:5d:22:d6:0b:51:f6:e0:c4: b5:f8:aa:00:da:6a:5b:46:0d:bd:61:8b:2e:69:32: 63:3d:88:b5:d8:4c:b4:8e:4c:dc:ab:0e:9c:71:ab: ed:57:0e:0d:5d:f7:76:50:43:bb:b2:39:6d:81:bc: 8d:65:22:a0:03:16:43:47:81:7a:d3:ad:d1:0b:3b: 9b:5f:bd:c0:f3:d3:18:2a:6a:6b:3f:6d:f8:fa:ac: eb:ce:62:52:d2:5b:3e:c2:dc:14:29:6b:7e:b9:53: 92:dd:ea:95:f6:34:15:14:bc:d0:0f:a5:e7:69:50: 1c:07:d0:24:a2:6a:b0:36:53:ac:10:5d:c7:54:ae: da:b0:3c:2b:46:0d:cb:be:40:01:41:18:3c:7b:07: a9:a0:dd:0f:b9:96:68:7a:14:26:cc:48:1c:77:fe: c8:86:35:a6:ae:31:77:f2:81:4e:04:1d:7e:e3:7f: 34:e1:e3:25:a5:42:b2:b8:5a:75:00:df:25:f3:ea: f6:59:3d:93:ad:2b:6e:07:b5:3e:3e:73:d1:c3:c7: f9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1A:46:55:7B:E8:4D:48:ED:19:5F:D3:AA:32:2E:22:9A:C0:6C:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/5522f690-be56-375d-afff-2d69c2f991dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.crl X509v3 Authority Key Identifier: keyid:16:5A:7A:F1:03:49:83:EA:4A:D5:9E:7D:02:EE:F7:1D:27:D4:0C:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1ec92c2-2a27-47bb-a115-e1db2cee0fef.cer sbgp-ipAddrBlock: critical IPv4: 64.255.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:0f:ed:d0:e0:09:29:8c:1c:1c:1f:0a:58:30:2e:98:80:ff: b1:01:7e:1d:10:5f:25:da:ae:c9:7b:1d:39:16:57:e2:e2:62: 46:77:c6:b4:74:42:bf:69:84:33:c1:cb:0c:12:e4:95:bc:6d: 96:ff:84:30:4e:49:d0:31:e9:38:6b:95:d6:40:81:33:71:04: 37:1f:5d:2e:47:7d:5d:ca:9c:c1:32:37:9c:e5:8e:aa:46:22: de:a1:4a:a8:75:2a:ce:73:8a:e0:e0:1e:9f:2e:03:9f:a1:70: 2f:55:7d:30:22:37:cf:a7:86:36:cc:c6:16:fe:25:03:43:bd: d6:2b:c6:36:9a:29:ef:8a:5b:df:d6:00:02:df:fa:86:c4:47: 3a:4b:64:36:79:e6:38:b8:6a:dc:07:71:e6:30:15:ac:29:1a: 41:6c:e4:a0:54:84:46:99:55:0b:81:a9:db:80:00:31:8a:ce: 8c:8f:1d:83:3a:1b:09:13:70:4b:fc:a7:97:50:2f:d9:c5:58: 6d:f1:73:41:75:09:13:bc:97:95:44:cf:aa:fc:ab:0c:66:4d: 7f:b6:6a:c6:ed:68:02:15:e4:58:30:68:93:ef:b2:3f:73:71: f0:7e:a3:c6:0c:a8:02:84:ee:82:f9:d5:bd:39:03:4c:72:a4: 9a:e4:9f:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5Rbf2ByDkl1lgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTFlYzkyYzItMmEyNy00N2JiLWExMTUtZTFkYjJjZWUw ZmVmMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk NmU1ODZlMmMtY2EzMS00ODQ1LTkyNjQtNjBiOTUzYTI0YTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9zQirPi+56gMvlA9hD2maCIsdv/ZQRLcQGK ramxRh0Jt7QBxtjp2CQIjhVJXtTO0Un+XSLWC1H24MS1+KoA2mpbRg29YYsuaTJj PYi12Ey0jkzcqw6ccavtVw4NXfd2UEO7sjltgbyNZSKgAxZDR4F6063RCzubX73A 89MYKmprP234+qzrzmJS0ls+wtwUKWt+uVOS3eqV9jQVFLzQD6XnaVAcB9Akomqw NlOsEF3HVK7asDwrRg3LvkABQRg8ewepoN0PuZZoehQmzEgcd/7IhjWmrjF38oFO BB1+43804eMlpUKyuFp1AN8l8+r2WT2TrStuB7U+PnPRw8f5eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQaRlV76E1I7Rlf06oyLiKawGwhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lMWVj OTJjMi0yYTI3LTQ3YmItYTExNS1lMWRiMmNlZTBmZWYvNTUyMmY2OTAtYmU1Ni0z NzVkLWFmZmYtMmQ2OWMyZjk5MWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTFlYzkyYzItMmEyNy00N2JiLWEx MTUtZTFkYjJjZWUwZmVmL2UxZWM5MmMyLTJhMjctNDdiYi1hMTE1LWUxZGIyY2Vl MGZlZi5jcmwwHwYDVR0jBBgwFoAUFlp68QNJg+pK1Z59Au73HSfUDFwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lMWVjOTJjMi0yYTI3LTQ3YmItYTExNS1lMWRi MmNlZTBmZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQP80MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcP7dDgCSmMHBwfClgwLpiA/7EBfh0QXyXarsl7HTkWV+LiYkZ3xrR0 Qr9phDPBywwS5JW8bZb/hDBOSdAx6ThrldZAgTNxBDcfXS5HfV3KnMEyN5zljqpG It6hSqh1Ks5ziuDgHp8uA5+hcC9VfTAiN8+nhjbMxhb+JQNDvdYrxjaaKe+KW9/W AALf+obERzpLZDZ55ji4atwHceYwFawpGkFs5KBUhEaZVQuBqduAADGKzoyPHYM6 GwkTcEv8p5dQL9nFWG3xc0F1CRO8l5VEz6r8qwxmTX+2asbtaAIV5FgwaJPvsj9z cfB+o8YMqAKE7oL51b05A0xypJrkn5Y= -----END CERTIFICATE-----Generated at Tue Apr 7 16:35:03 2026 by rpki-client